impel-cli 0.20.23 → 0.20.24

package/RELEASE_NOTES.md

@@ -1,5 +1,12 @@
 # Release notes
 
+## 0.20.24 — Keep Codex adapters silent until terminal
+
+- Explicitly forbids every collaboration tool inside active and recovery Codex
+  adapters so a compatible child cannot message its parent during a run.
+- Advances the managed profile manifest so existing CLI and Desktop adapters
+  receive the stricter terminal-only behavior immediately.
+
 ## 0.20.23 — Remove skill-catalog adapter overhead
 
 - Removes the installed skill catalog from fixed-binding Codex adapter prompts;

package/docs/native-agent-host-capability-matrix.md

@@ -24,6 +24,8 @@ is treated as an eager host.
   outer host deadline and resume never opens a replacement run.
 - Parent guidance permits one spawn and one blocking wait. It forbids follow-up
   nudges and independent synthesis while the child is running.
+- Codex adapters explicitly forbid every collaboration tool and communicate
+  with the compatible parent only through their terminal response.
 - Host and transport traces must never include prompts, answers, credentials, or
   decrypted provider material. Production measurements use correlation ids,
   phase timestamps, counts, durations, build identifiers, and terminal classes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.23",
+  "version": "0.20.24",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -52,7 +52,7 @@ export const NATIVE_AGENT_RUN_TOOL = "run_native_agent";
 export const NATIVE_AGENT_RESUME_TOOL = "resume_native_agent_run";
 export const NATIVE_AGENT_RECOVER_TOOL = "recover_native_agent_runs";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 15;
+export const MANAGED_AGENT_MANIFEST_VERSION = 16;
 
 // The host model only selects the fixed MCP tool and faithfully returns its
 // result. Luna preserves deterministic direct-only code-mode routing while the
@@ -655,7 +655,7 @@ function codexAdapterInstructions(tenantId, agent) {
   const callerGuidance = usesVerbatimRelay(agent)
     ? adapterCallerSpawnGuidance("Codex")
     : null;
-  const collaborationConstraint = `Collaboration tools are disabled. Return one final response to the caller after the native-agent transport reaches terminal.`;
+  const collaborationConstraint = `Collaboration tools are unavailable for this adapter. Never call send_message, followup_task, interrupt_agent, spawn_agent, or wait_agent. Return one final response to the caller only after the native-agent transport reaches terminal.`;
   if (usesDirectAnswer(agent)) {
     const completionGuidance = usesVerbatimRelay(agent)
       ? adapterAnswerVerbatimCompletionGuidance()
@@ -691,7 +691,7 @@ function codexAdapterInstructions(tenantId, agent) {
 function retiredAdapterInstructions(tenantId, agent) {
   return [
     `You are a recovery-only transport adapter for retired Impel native-agent binding ${JSON.stringify(agent.agentId)} in tenant ${JSON.stringify(tenantId)}.`,
-    `Collaboration tools are disabled. Return one final response to the caller after the native-agent transport reaches terminal.`,
+    `Collaboration tools are unavailable for this adapter. Never call send_message, followup_task, interrupt_agent, spawn_agent, or wait_agent. Return one final response to the caller only after the native-agent transport reaches terminal.`,
     `You cannot start new work. Never call run_native_agent and never perform or recreate the assigned task yourself.`,
     `Call ${nativeToolName(NATIVE_AGENT_RECOVER_TOOL)} with {} to obtain integrity-validated pending handles for this fixed binding, then call ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} with the intended handle until it returns a terminal result. If multiple handles cannot be safely associated with the request, report them instead of choosing.`,
     `Return successful finalText byte-for-byte. For failure, return the preserved runId, output, and error without inventing a replacement result.`,